Over the last years, the number of cyber-attacks on industrial control systems has been steadily increasing. Among several factors, proper software development plays a vital role in keeping these systems secure. To achieve secure software, developers need to be aware of secure coding guidelines and secure coding best practices. This work presents a platform geared towards software developers in the industry that aims to increase awareness of secure software development. The authors also introduce an interactive game component, a virtual coach, which implements a simple artificial intelligence engine based on the laddering technique for interviews. Through a survey, a preliminary evaluation of the implemented artifact with real-world players (from academia and industry) shows a positive acceptance of the developed platform. Furthermore, the players agree that the platform is adequate for training their secure coding skills. The impact of our work is to introduce a new automatic challenge evaluation method together with a virtual coach to improve existing cybersecurity awareness training programs. These training workshops can be easily held remotely or off-line.

中文翻译：

---

具有虚拟教练和自动挑战评估的网络安全意识平台

在过去的几年中，对工业控制系统进行网络攻击的数量一直在稳定增长。在多个因素中，适当的软件开发在确保这些系统安全方面起着至关重要的作用。为了获得安全的软件，开发人员需要了解安全的编码准则和安全的编码最佳实践。这项工作提供了一个面向行业软件开发人员的平台，旨在提高对安全软件开发的认识。作者还介绍了一个交互式游戏组件，即虚拟教练，该教练实现了一种基于阶梯技术进行采访的简单人工智能引擎。通过调查，与现实世界中的参与者（来自学术界和工业界）对已实现工件的初步评估表明，已开发平台得到了积极认可。此外，玩家同意该平台足以培训其安全的编码技能。我们工作的影响是引入新的自动挑战评估方法以及虚拟教练，以改善现有的网络安全意识培训计划。这些培训研讨会可以轻松地远程或离线举行。